Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,168 npm 223,991 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    scikit-learn-matplotlib 6.12.17
    MAL-2023-1405 ossf-package-analysis
  • PyPI
    print-django 3.9.10
    MAL-2023-1387 ossf-package-analysis
  • PyPI
    django-pyyaml 20.17.15
    MAL-2023-1362 ossf-package-analysis
  • PyPI
    beautifulsoup-scikit-learn 2.4.9
    MAL-2023-1358 ossf-package-analysis
  • PyPI
    pygame-print 15.0.6
    MAL-2023-1390 ossf-package-analysis
  • PyPI
    sys-scikit-learn 17.8.18
    MAL-2023-1416 ossf-package-analysis
  • PyPI
    req-matplotlib 11.2.18
    MAL-2023-1400 ossf-package-analysis
  • PyPI
    pyyaml-selenium 1.15.3
    MAL-2023-1398 ossf-package-analysis
  • PyPI
    matplotlib-requests 16.12.4
    MAL-2023-1378 ossf-package-analysis
  • PyPI
    req-os 20.5.17
    MAL-2023-1401 ossf-package-analysis
  • PyPI
    matplotlib-flask 7.15.10
    MAL-2023-1376 ossf-package-analysis
  • PyPI
    sys-selenium 9.1.9
    MAL-2023-1417 ossf-package-analysis
  • PyPI
    requests-flask 16.9.16
    MAL-2023-1402 ossf-package-analysis
  • PyPI
    beautifulsoup-requests 12.15.13
    MAL-2023-1357 ossf-package-analysis
  • PyPI
    pytorch-pygame 0.6.19
    MAL-2023-1397 ossf-package-analysis
  • PyPI
    sqlalchemy-install 10.9.4
    MAL-2023-1413 ossf-package-analysis
  • PyPI
    install-crypto 4.18.5
    MAL-2023-1370 ossf-package-analysis
  • PyPI
    pylint-sys 8.15.6
    MAL-2023-1395 ossf-package-analysis
  • PyPI
    keras-arg 19.14.9
    MAL-2023-1373 ossf-package-analysis
  • PyPI
    keras-beautifulsoup 2.9.2
    MAL-2023-1374 ossf-package-analysis
  • PyPI
    install-pytest 1.12.7
    MAL-2023-1371 ossf-package-analysis
  • PyPI
    pywolle 1.0.0
    MAL-2023-8590 checkmarx, reversing-labs 17 IOCs
  • PyPI
    guiconsoles 1.0.5
    MAL-2023-1366 ossf-package-analysis
  • PyPI
    pandasprox 0.1.9, 0.1.8, 1.0.1, 0.1.6, 0.1.7, 0.1.5, 0.1.4, 1.0.0
    MAL-2023-1386 ossf-package-analysis
  • PyPI
    pywhool 1.0.0
    MAL-2023-8589 checkmarx, reversing-labs 17 IOCs
  • PyPI
    security-util-py 0.0.6, 0.0.5
    MAL-2023-10 ossf-package-analysis
  • PyPI
    gkjzjh146 1.3
    MAL-2023-1365 ossf-package-analysis
  • PyPI
    pywool 1.0.2, 1.0.0
    MAL-2023-8591 checkmarx, reversing-labs 17 IOCs
  • PyPI
    spammingsynonym 3.0.1
    MAL-2023-1410 ossf-package-analysis
  • PyPI
    spammingsynonyms 3.0.1
    MAL-2023-1411 ossf-package-analysis
  • PyPI
    httprequesting 3.0.1
    MAL-2023-1367 ossf-package-analysis
  • PyPI
    smsobfuscate 1.0.1
    MAL-2023-1409 ossf-package-analysis, reversing-labs
  • PyPI
    spamsynonym 1.1.1, 1.0.0
    MAL-2023-1412 ossf-package-analysis, reversing-labs
  • PyPI
    iiris-new2 1.0.0
    MAL-2023-1369 ossf-package-analysis
  • PyPI
    iiris-new 2.0.16
    MAL-2023-1368 ossf-package-analysis
  • PyPI
    test-test-test-leys-check 9.9.9
    MAL-2023-1419 ossf-package-analysis, reversing-labs
  • PyPI
    selfpyintpaypal all versions
    MAL-2023-6525 checkmarx 2 IOCs
  • PyPI
    selfcontrolloadload all versions
    MAL-2023-5975 checkmarx 2 IOCs
  • PyPI
    py-intellibint all versions
    MAL-2023-5233 checkmarx 2 IOCs
  • PyPI
    esqgameencodereplace all versions
    MAL-2023-2868 checkmarx 2 IOCs